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said m^sfer security system Vionitors said detection means through said secure 
link and registers information pertaining to jattacks detected by said detection means.- 

-14. The security system of Qaim 13, wherein said detection means is one or 
more selected from the group consisting of anjintrusion detection system, a firewall and a 
security subsystem.— 

-15. The security system of Claim 13, wherein said master security system is 
hierarchically independent from said detection rAeans.- 


-16. The security system of Clairri 13 further comprising a pseudo attack 
generator associated with said master security system for generating attacks on said computer 
detectable by said detection means wherein said mkster security system monitors said detection 
means by comparing said pseudo-attacks to said attacks detected by said detection means.- 

-17. A netwclrk security system for k target network of computers comprising: 
at least one detection means associated with said target network, said detection 
means configured to detect an attack on said network 

a master security system located outsMe said network; and 
a secure link between said detection nleans and said master security system 
enabling data communication therebetween; wherein 



9179130.1 


09/770,525 
Page 3 


881075/3 


said master securiJy^st em mohitors said detection means through said secure 
link and register^itriSrmation pertaining to attacks detected by said detection means.-- 


-18. The network security systeiA of Claim 17, wherein said detection means is 
one or more selected from the group consisting cf an intrusion detection system, a firewall and a 
security subsystem.- 


-19. The network security system 
system is hierarchically independent from said 


of Claim 17, wherein said master security 
detection means. - 



-20. The network security system of Claim 17 further comprising a pseudo-attack 
generator associated with said master security syitem for generating attacks on said target 
network detectable by said detection means wherfein said master security system monitors said 
detection means by comparing said pseudo-attackp to said attacks detected by said detection 
means.- 

-21. A method for monitoring the integrity of a detection means associated with a 
computer, said computer beihg connected to a computer network, and configured to detect an 
attack on said computer, said method comprising the steps of: 

establishing a sdcure link for the transfer of data between said detection means 
and a master system hierarchically independent fromkaid detection means; 

monitoring the stitus of said detectionlmeans through said secure link; and 
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